mediumMultiple SelectObjective-mapped
CISA Practice Question: An IS auditor is evaluating the effectiveness of…
An IS auditor is evaluating the effectiveness of a backup strategy for a critical database. Which TWO of the following are essential controls to ensure data recoverability?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Storing backups offsite
Regular restoration tests verify that backups are recoverable, and offsite storage ensures availability after a site disaster. Encryption, labeling, and capacity are security or operational considerations but not essential for recoverability.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Storing backups offsite
Why this is correct
Correct: Offsite storage protects against site-level disasters.
- ✗
Encrypting backup tapes
Why it's wrong here
Encryption protects confidentiality, not recoverability.
- ✓
Performing regular restoration tests
Why this is correct
Correct: Testing validates that data can actually be restored.
- ✗
Labeling tapes with dates
Why it's wrong here
Labeling aids organization but not essential for recoverability.
- ✗
Using high-capacity media
Why it's wrong here
Capacity is a sizing concern, not a control for recoverability.
Go deeper
Related to this question
About these practice questions
One of 995 original CISA practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.